An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially…
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SonicWall
- Product
- Global Management System (GMS)
- CVSS v3.1
- 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Exploitation
- SSVC none, automatable yes, impact partial
- Weakness
- CWE-636
- Exposure class
- Network management
- NVD status
- Received
Why it ranks 48 (High)
- CVSS v3.1 9.1 critical
- SSVC: automatable
- Product class: network management
- Widely deployed vendor product (SonicWall)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.